Repository navigation
Add private accounts, project sharing, recycle bin and MCP discovery compatibility - #3
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
项目原来没有默认私有的账号归属、可恢复删除和退出入口，MCP 也只支持旧初始化流程。此变更将新项目绑定已验证账号，默认私有并允许 owner 明确授权 reader/writer；项目与编排删除进入回收站，恢复保留内容和不可变历史。现有明确成员授权保留。
增加 Access JWT 签名/issuer/audience 校验、固定 Agent 账号映射和私有缓存保护。REST、MCP、媒体读取和浏览器共用领域权限；owner 管理共享与项目删除，writer 可管理编排删除。
MCP 同时支持 2025 initialize 和 2026-07-28 server/discover，修正通知空 202、GET 405、非法消息 400，以及逐请求版本/路由头校验。两代官方 SDK 分别验收，现代客户端强制 pin 2026-07-28，禁止静默回退。
验证：typecheck、lint、62 条集成测试、20 条真实 Chromium 测试、生产构建和 Worker dry-run 通过。现有生产 D1 备份已在私有位置保存；在备份副本应用 0004 演练通过，现有内容和 OAuth 记录不变，两个项目都能明确归属。备份与私有项目资料未进入仓库。
发布需先应用增量迁移 0004，再部署带正确 Access 配置的 Worker。软删除开始使用后不能直接回滚到忽略生命周期的旧 Worker。详见 docs/accounts-and-trash.md、docs/mcp-discovery.md。ChatGPT 托管连接器的恢复需发布后单独回读确认。
发布完成：合并提交
c3707fe00f6384bb3a959336b8a763097dc56bfc的 CI 40204801944 通过。已备份生产 D1 并执行 0004；Worker version1f0877e7-8617-4625-ab0e-bc2eef61f5e5在两个既有域名部署至 100%。生产浏览器账号/共享/回收站页面可读，现有编排文档和 head 修订经哈希比较保持不变。两代官方 SDK 在线认证回读各发现 43 tools / 7 prompts / 4 resources，项目与规则读取通过，临时验收令牌已撤销。ChatGPT 新 vflow 插件页面仍显示未安装；未把 SDK 验收当作托管连接器安装成功。